$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20573de7-504c-383e-8ddc-db17ead7e218.roa File: 20573de7-504c-383e-8ddc-db17ead7e218.roa (raw, json) Hash identifier: jy9oxAzxOiVtl6RrJvcrSsOpdBnoEHahx471WxmbM/s= Subject key identifier: D2:69:EF:A3:60:A2:DA:65:62:C8:11:F8:FE:F7:9B:11:C3:7A:B9:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F96D9442881498A9F36800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20573de7-504c-383e-8ddc-db17ead7e218.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.44.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:6d:94:42:88:14:98:a9:f3:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=3d36a191-20fa-4e5b-a0b9-0a90c8621240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:75:80:d8:cb:44:77:54:a4:7c:0d:b4:09: b7:78:49:9c:64:fa:d1:00:1f:dd:0c:55:c3:78:c7: 70:da:d1:15:b6:4f:9b:30:6a:ff:20:41:a3:8f:cc: 9d:7d:f2:9c:cc:93:85:49:98:65:30:d2:85:13:13: a0:d8:77:fb:67:64:ec:d4:b6:9b:5e:04:fa:50:07: a2:aa:af:e5:42:cd:63:90:c5:74:e0:61:9a:d2:5b: 04:86:11:4c:df:17:69:9f:8a:b1:eb:1c:2d:24:ab: 97:f1:60:5e:a3:c7:34:1c:b7:64:4a:64:1b:27:7f: de:1f:e3:ae:a7:db:ed:cd:0e:d3:48:65:99:83:97: 00:53:61:87:ff:ea:f6:f8:f7:50:28:ec:3c:b7:ed: 8a:c2:92:2b:39:4c:61:16:c9:bd:61:96:9d:2f:95: 89:7e:f8:5c:8f:43:56:3d:c9:65:9d:e5:16:4e:f6: c0:df:e6:fb:6e:52:29:88:d3:e9:bc:b5:be:52:e2: 18:36:54:f9:2a:44:98:fb:62:19:bd:e3:9b:06:80: fb:ea:d1:ee:a3:03:1d:3f:bf:c2:ef:7f:bd:ff:21: 7c:a8:e1:a4:85:67:74:ac:3b:72:f2:fc:bc:17:7b: 8a:00:52:52:fa:2c:71:7f:92:92:ab:78:1b:cf:97: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:69:EF:A3:60:A2:DA:65:62:C8:11:F8:FE:F7:9B:11:C3:7A:B9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20573de7-504c-383e-8ddc-db17ead7e218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.44.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:41:07:1b:99:86:08:1d:81:b6:82:24:ac:89:ef:34:17:94: fb:dd:43:1d:02:1a:41:12:9c:22:5a:f1:c4:18:92:f1:b0:a5: 5b:fd:ff:de:92:e6:50:05:17:da:1d:29:dd:58:e0:b5:99:0e: c8:59:f1:bb:5a:c6:f9:e2:c7:d6:11:9d:5b:c8:7a:40:55:8c: 14:dd:95:1e:ca:61:b7:e9:d9:0f:60:e9:2d:ad:94:2b:46:ca: a7:f4:74:54:92:39:86:6d:36:24:b2:26:2f:0f:5a:be:ce:aa: a2:8d:ea:c1:b5:68:5e:5f:f8:c2:5c:fc:7e:95:c2:73:88:5e: d6:c5:9f:c4:b0:57:43:b8:a9:e3:65:d3:56:78:a0:b6:b5:1f: 40:ec:64:c4:16:d4:66:58:70:23:bd:a5:2c:fe:49:85:2b:19: 65:e5:cc:6b:f2:a8:d9:f0:9b:8a:a4:1a:d2:4c:ea:8a:88:97: 6d:6c:59:c3:80:8a:65:a2:8d:88:68:ee:20:6a:0f:b3:17:41: 38:93:6c:6f:e0:fd:82:a7:ff:b9:e9:cc:64:8e:d5:30:72:e2: f6:7d:ce:72:1c:be:dd:3b:04:fe:31:6f:1e:33:c9:0f:6d:c8: 51:50:c6:c4:b6:f0:4f:6a:0b:86:63:ef:f7:4a:20:33:f8:2a: 6c:2d:08:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+W2UQogUmKnzaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk M2QzNmExOTEtMjBmYS00ZTViLWEwYjktMGE5MGM4NjIxMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fR1gNjLRHdUpHwNtAm3eEmcZPrRAB/dDFXD eMdw2tEVtk+bMGr/IEGjj8ydffKczJOFSZhlMNKFExOg2Hf7Z2Ts1LabXgT6UAei qq/lQs1jkMV04GGa0lsEhhFM3xdpn4qx6xwtJKuX8WBeo8c0HLdkSmQbJ3/eH+Ou p9vtzQ7TSGWZg5cAU2GH/+r2+PdQKOw8t+2KwpIrOUxhFsm9YZadL5WJfvhcj0NW PcllneUWTvbA3+b7blIpiNPpvLW+UuIYNlT5KkSY+2IZveObBoD76tHuowMdP7/C 73+9/yF8qOGkhWd0rDty8vy8F3uKAFJS+ixxf5KSq3gbz5czSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJp76NgotplYsgR+P73mxHDermOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA1NzNkZTctNTA0Yy0z ODNlLThkZGMtZGIxN2VhZDdlMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYix1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpBBxuZhggdgbaCJKyJ7zQXlPvdQx0CGkESnCJa8cQYkvGwpVv9/96S 5lAFF9odKd1Y4LWZDshZ8btaxvnix9YRnVvIekBVjBTdlR7KYbfp2Q9g6S2tlCtG yqf0dFSSOYZtNiSyJi8PWr7OqqKN6sG1aF5f+MJc/H6VwnOIXtbFn8SwV0O4qeNl 01Z4oLa1H0DsZMQW1GZYcCO9pSz+SYUrGWXlzGvyqNnwm4qkGtJM6oqIl21sWcOA imWijYho7iBqD7MXQTiTbG/g/YKn/7npzGSO1TBy4vZ9znIcvt07BP4xbx4zyQ9t yFFQxsS28E9qC4Zj7/dKIDP4KmwtCPY= -----END CERTIFICATE-----Generated at Sun Apr 27 09:20:06 2025 by rpki-client